In the Rational Developer for System z (RDz) version 9.0, when you use the Secure Socket Layer (SSL) connection, you may see the following error while enabling your CICS debug configuration profile before debugging you CICS application:
PKIX path building failed: java.security.cert.CertPathBuilderException:
PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate issued by CN=RACF CA FOR HOST1 20160202, OU=NCIC, O=ABC is not trusted; internal cause is:java.security.cert.CertPathValidatorException: Certificate chaining error
where HOST1 is the z/OS host of your secure connection.
This error may be caused by the certificate not being set up correctly on the client machine.
In order to maintain your SSL connection with the correct certificate, please refer to Rational Developer for System z 9.0 documentation links below:
Managing SSL security and certificates: http://pic.dhe.ibm.com/infocenter/ratdevz/v9r0/topic/com.ibm.cics.core.help/topics/tasks/task_SSL_connections.html
Using SSL security for Explorer connections: http://pic.dhe.ibm.com/infocenter/ratdevz/v9r0/topic/com.ibm.cics.core.help/topics/concepts/SSL_intro.html
If you do not need to use certificates with your SSL connection, you can prevent the error by disabling the certificate management in RDz in the following way:
1. On the workbench menu bar click Window -> Preferences, then expand Explorer and click Certificate management.
2. Select the checkbox Disable certificate management for secure connections.
3. Click Apply and OK to save your settings and close the window.